🤖 Analyst Copilot
8.8.8.8 evil.com Russia sources for GEOINT free apis for crypto assess ransomware threat what is ACH
Four agents, all local-first: Triage (IoC/country lookup), Collection (find the best free sources from 1,033), Analyst (assessment frames), Trainer (tradecraft). No data leaves the platform.
📡 Collection Agent — 14 sources
Tracks botnet C2 servers (Emotet, Dridex, QakBot, TrickBot); downloadable IP/port blocklists.
BBB Scam Tracker NONE
US/Canada consumer scam reports.
State-sponsored cyber incident tracker (public dataset).
Cybercrime Tracker NONE
Long-running tracker of banking-trojan and botnet C2 panel URLs.
Free web tool checking an email against a large aggregated breach/leak collection.
Free web checker for email exposure across a large aggregated breach index.
Dark Web Informer NONE
Daily dark-web and cybercrime threat-intel feed covering leaks, breaches and ransomware claims.
DarkFeed NONE
Public dashboard indexing ransomware leak-site victims and threat-actor activity (paid API tier).
Per-package CVE status across Debian releases; free full JSON export and DSA advisory feeds.
Open-source investigations into disinformation and influence operations worldwide.
Searchable encyclopedia of threat actors and their tools and operations.
European Repository of Cyber Incidents — attributed state operations.
FBI IC3 NONE
Internet crime & BEC/fraud complaints.
Tracks botnet C2 servers for Emotet, Dridex, QakBot and TrickBot.
Full filters in the Source Catalog.
Tip: add an
apikey_openai or apikey_anthropic in settings (or an OPENAI_API_KEY/ANTHROPIC_API_KEY constant in config.php) to get an AI narrative on top of the local facts below.CFR Cyber Operations Tracker — OTHER ioc
| Local status | Not currently in the indicator store |
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Explore related tools below
- Automate recurring work via cron